Cryptocurrency Wallet File Theft from Multiple Wallet Apps
Detects suspicious process command lines that access sensitive cryptocurrency wallet data files or registry keys associated with wallet applications, which is a common behavior of information-stealing malware.
Sigma

